CWE-1281: Sequence of Processor Instructions Leads to Unexpected Behavior

Base Incomplete Simple

CWE版本: 4.18

更新日期: 2025-09-09

弱点描述

Specific combinations of processor instructions lead to undesirable behavior such as locking the processor until a hard reset performed.

常见后果

影响范围: Integrity Availability

技术影响: Varies by Context

潜在缓解措施

阶段: Testing

描述: Implement a rigorous testing strategy that incorporates randomization to explore instruction sequences that are unlikely to appear in normal workloads in order to identify halt and catch fire instruction sequences.

阶段: Patching and Maintenance

描述: Patch operating system to avoid running Halt and Catch Fire type sequences or to mitigate the damage caused by unexpected behavior. See [REF-1108].

观察示例

参考: CVE-2021-26339

A bug in AMD CPU's core logic allows a potential DoS by using a specific x86 instruction sequence to hang the processor

参考: CVE-1999-1476

A bug in some Intel Pentium processors allow DoS (hang) via an invalid "CMPXCHG8B" instruction, causing a deadlock

引入模式

阶段 说明
Architecture and Design Unexpected behavior from certain instruction combinations can arise from bugs in the ISA
Implementation Unexpected behavior from certain instruction combinations can arise because of implementation details such as speculative execution, caching etc.

适用平台

编程语言
Not Language-Specific (Undetermined)
操作系统
Not OS-Specific (Undetermined)
技术
Not Technology-Specific (Undetermined) Processor Hardware (Undetermined)
关键信息

CWE ID: CWE-1281

抽象级别: Base

结构: Simple

状态: Incomplete

相关弱点
相关攻击模式
CAPEC-212